Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/snqCiVYp5p8Lnrc1NeEgYuXXGp4.roa
File: snqCiVYp5p8Lnrc1NeEgYuXXGp4.roa (raw, json)
Hash identifier: TVntqeQWgonzVc84Jg5TAW7P7Xx+JL5CDf2qgF9lz34=
Subject key identifier: B2:7A:82:89:56:29:E6:9F:0B:9E:B7:35:35:E1:20:62:E5:D7:1A:9E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019730A1C7106424DFF3CAA4A68A73C4CF9D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/snqCiVYp5p8Lnrc1NeEgYuXXGp4.roa
Signing time: Mon 02 Jun 2025 12:33:18 +0000
ROA not before: Mon 02 Jun 2025 12:33:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.231.30.0/24 maxlen: 24
5.231.94.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
94.249.233.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
178.18.144.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:30:a1:c7:10:64:24:df:f3:ca:a4:a6:8a:73:c4:cf:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 2 12:33:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b27a82895629e69f0b9eb73535e12062e5d71a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:23:b5:a6:44:59:fb:ed:04:2b:ff:6d:88:e1:
c4:e3:ed:4b:59:a3:94:69:25:40:7b:75:0c:f3:2d:
09:54:9d:49:a7:6b:ad:66:c1:66:3e:92:e5:53:3b:
09:f9:cf:56:2c:f3:2d:19:ba:cd:9f:da:8a:4b:56:
09:02:6a:76:40:c3:95:1f:8d:db:c6:a9:00:f6:0e:
5e:24:e3:00:30:22:20:15:3d:66:f9:23:45:d0:c5:
3f:68:d6:ab:13:34:d6:5e:1b:8f:a7:60:32:ca:b6:
c9:cc:90:39:19:d8:dc:3b:a8:d1:23:ec:27:14:9b:
39:a0:a6:a4:94:28:78:37:3b:61:b6:d3:c8:e7:18:
2b:97:5d:81:74:e2:69:14:fe:18:86:37:b5:72:80:
25:71:a3:75:98:ea:62:15:3d:57:fd:5c:6e:d2:88:
dc:68:26:51:8c:42:04:b8:b2:41:f8:d7:3e:68:ff:
d1:e7:8e:c5:6d:a0:0c:60:81:2e:af:fa:29:6f:58:
01:21:53:2e:3a:46:58:10:75:94:67:70:62:c3:d7:
d8:68:0e:66:a1:00:65:2d:68:be:fd:9e:6c:92:1c:
91:21:87:ea:18:c8:c2:ef:6a:3a:ca:5f:03:3e:47:
0a:a3:f1:9b:21:d3:39:d2:9a:bb:00:a6:d5:52:b9:
12:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7A:82:89:56:29:E6:9F:0B:9E:B7:35:35:E1:20:62:E5:D7:1A:9E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/snqCiVYp5p8Lnrc1NeEgYuXXGp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.231.30.0/24
5.231.94.0/24
77.90.54.0/24
87.239.131.0/24
94.249.195.0/24
94.249.233.0/24
95.215.32.0/24
95.215.34.0/24
178.18.144.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:92:9b:a3:61:be:9d:fc:1e:f5:8f:d2:df:fd:74:e8:33:48:
fc:89:64:05:f3:c0:ff:d5:47:06:1d:6c:dd:25:dc:28:01:42:
b9:2e:62:67:ad:4e:45:1a:bb:61:25:88:a8:e6:96:90:41:ac:
10:bf:ee:36:d3:88:84:f3:21:00:23:37:9a:db:13:ce:51:7a:
b0:8d:af:8f:be:98:c6:64:98:c9:09:7b:6a:3c:ec:16:71:32:
c4:52:27:4a:f0:f7:b3:3a:57:56:80:2e:d8:cd:30:22:c6:a3:
a9:9b:6d:17:7f:74:de:c1:67:bb:5b:ac:bf:ea:49:2b:49:64:
ac:d7:b5:da:47:34:03:f7:39:cc:6b:a5:47:0d:0b:ae:3a:e6:
81:39:70:ee:02:85:cb:3f:dc:0c:30:62:7e:e1:44:90:1f:98:
d1:79:38:46:7f:e4:96:dc:85:cb:02:75:46:60:ae:bf:fa:1b:
17:04:94:b5:f3:77:f4:ee:4a:60:51:78:cd:84:68:1b:c2:b4:
82:65:e4:88:66:1c:e6:a1:dd:38:3a:57:bc:11:1f:25:2d:0f:
41:8c:6b:91:d7:87:f7:12:f3:0b:44:0a:f7:fe:bd:fd:ad:96:
c2:50:5a:0b:53:9c:dd:d0:7f:6f:38:71:38:e1:e8:53:32:24:
53:e7:05:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:13:54 2025 by rpki-client